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IN THE CLAIMS : 

Please find below a listing of all of the pending claim. The statuses of the claims are 
set forth in parentheses. Please amend the claims as follows: 

1. (Original) A secure token for use with an enwypted file and an insecure decryption 
device, tbc secure token comprising a processor for protecting a first cryptographic key 
against unauthorized access, and creating a second cryptographic key from the first key and a 
message unique to the insecure device, the second key usable for file decryption by the 
insecure device- 
s' (Original) The secure token of claim 1 wherein the secure token includes a smart card, the 
smart card including the processor. 

3. (Original) The secure token of claim 1, wherein the processor uses a hush Junction to 
create the second key from the message and the first key. 

4. (Original) The secure token of claim 1, wherein the secure token performs an electronic 
transaction lo obtain ihc first key* 

5. (Original) The secure token of claim 4, wherein the secure token conducts a transaction 
with a server to purchase a desired file; and wherein the secure token receives the first key 
Irom the server. 
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6, (Original) The secure token of claim 4, wherein the secure token conducts a transaction 
with a peer to purchase a file; and wherein the secure token receives the first key from the 
peer. 

7- (Original) The secure token of claim 4, wherein the secure token conducts a transaction 
with a peer to sell a file; and wherein the secure token sends the first key to the peer* 

8. (Original) The secure token of claim 7, wherein the secure token creates a third key that is 
unique to the peer, and sends the third key to the insecure device and the peer* 

9, (Original) The secure token of claim 1, further comprising means for receiving the first 
key and encrypted data, wherein the insecure device uses the second key to decrypt the 
encrypted data. 

10, (Original) The secure token of claim 1, wherein processing power of the secure token is 
significantly less than processing power of the insecure device. 

11. (Original) An article for a secure device, the secure device including a processor, the 
secure device used in combination with am insecure device, the article comprising memory . 
encoded with data for instructing the processor to protect a first cryptographic key against 
unauthorized access, use a hash function to create a second cryptographic key from the first 
key and a message unique to the insecure device, and send the second key to the insecure 
device. 
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12. (Original) The article of claim 1 1 , wherein data further instructs the processor to 
perform an electronic transaction to obtain the first key. 

13. (Original) The article of claim 12, wherein the secure device conducts a transaction with 
a server to purchase a desired file; and wherein the secure device receives the first key Irom 
the server, 

14. (Original) The article of claim 13, wherein the secure device conducts a transaction with 
a peer to purchase a file; and wherein the secure device receives the first key from the peer. 

15. (Original) The article of claim 13, wherein the secure device conducis a transaction with 
a peer to sell a file; and wherein die secure device sends the first key to the peer. 

16. (Original) The article of claim 15, wherein the data fintber instructs the processor to 
create a third key that is unique to the peer, sends the third key to the insecure device and the 
peer. 

17. (Currently Amended) A data rights management server for use with a media transaction 
system, the server comprising a processing unit programmed to cause the server to establish a 
secure channel with a smart card, access a unique identifier corresponding to an insecure 
device, send *he a first cryptographic key to die smart card via the secure channel, receive a 
unique identifier from the insecure device, create a second key irom the first key and the 
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identifier; encrypt a media file with the second key, and send the encrypted media file lo the 
insecure device* the first key corresponding to die media flic. 

18. (Original) The server of claim 17, wherein the smart card and the server perform an 
electronic transaction for the first key, 

1 9. (Original) A method of using an insecure decryption device for file distribution, the 
method comprising: 

accessing a message unique to the insecure device; 
accessing a first cryptographic key; 

creating a second cryptographic key from the message and the first key; and 
allowing the insecure device to access the second key but not the first key; whereby 
the insecure device can use the second key for decryption. 

20. (Original) The method of claim 19, wherein a hash function is used to create the second 
key from the message and the first key. 

21. (Original) The method of claim 19, wherein accessing the first key includes performing 
an electronic transaction to obtain the first key. 

22. (Original) The method of claim 21 , wherein the electronic transaction is conducted with 
a server to purchase a desired file; and accessing the first key includes receiving the first key 
from the server. 
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23- (Original) The method of claim 2 1 , wherein the electronic transaction is conducted with 
a peer to purchase a file; and wherein accessing the first key includes receiving the first key 
from the peer. 

24. (Original) The method of claim 21, wherein the electronic transaction is conducted with 
a peer to sell a file; the method further comprising sending the first key lo the peer. 

25. (Original) The method of claim 24, further comprising creating a third key that is unique 
to the peer, and sending the third key to the insecure device and the peer. 

26. (Original) An insecure decryption device for use with a secure device and a first 
cryptographic key, the device comprising: 

means for sending a message to ihc secure device, the message unique to the insecure 

device; 

means for receiving a second cryptographic key from the secure device, the second 
cryptographic key derived from the message and the first cryptographic key; and . 
means for performing decryption with the second cryptographic key. 

27. (Originnl) The device of claim 26, farther comprising means for playing media 
decrypted with the second cryptographic key. 

28. (Currently Amended) A trusted system for file distribution, the system comprising: 
an insecure device; and 
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a trusted secure device for storing a first cryptographic key, accessing a message from 
the insecure device wherein the message is unique ,to_thc_insecure device, creating a second 
cryptographic key from the message and the first key, and allowing the insecure device to 
access the second key, the first key granting file access rights; 

the insecure device not allowed to access the Erst key, the insecure device using the 
second key for decryption. 

29. (Canceled). 

30. (Original) The system of claim 28, wherein the secure device is a secure token. 
31/ (Original) The system of claim 30, wherein the secure token includes a Smart card. 

32. (Original) The system of claim 3 1 , wherein the insecure device includes a media player. 

33- (Original) The system of claim 28 T wherein the secure device is configured to perform 
an electronic transaction to obtain the first key. 

34. (Original) The system of claim 28, wherein processing power of the secure device is 
significantly less than processing power of the insecure device. 

35. (Original) The system of claim 28, farther comprising a peer-to-pcer application for 
identifying peers having desired files. 
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36, (Currently Amended) A trusted media transaction system comprising 
. an insecure media player; and 

a trusted secure token for performing an electronic transaction to obtain a Erst 
cryptographic key, accessing a message from the insecure device wherein the_m_essagc_is 
unique to the insecure_d_evice, creating a second cryptographic key from the message and the 
first key, and allowing the insecure device to access the second key, the first key granting 
media file access rights; 

the insecure device configured to use the second key for media file decryption. 
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